On February 19, 2025, Great Plains Bank Corporation filed an official data breach notice with the Maryland Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Maryland Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official Maryland AG notice for Great Plains Bank Corporation identifies the following exposed data:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Great Plains Bank Corporation operates as a financial institution, providing critical banking, lending, and wealth management services to individual consumers and commercial clients. Institutions of this nature occupy a position of absolute trust in the financial lives of their customers, collecting and storing a vast repository of high-value personal and financial information in order to facilitate daily transactions, process loan applications, and manage investment portfolios. Because modern banking relies heavily on interconnected digital infrastructure and centralized customer databases, Great Plains Bank Corporation maintains vast digital profiles that make it an attractive target for cybercriminals seeking to monetize stolen data.
In 2025, Great Plains Bank Corporation reported a significant data security incident to the Office of the Maryland Attorney General. While the precise vectors of financial institution cyberattacks vary—often involving sophisticated ransomware deployments, unauthorized intrusion into core banking networks, or vulnerabilities within third-party vendor systems—such breaches fundamentally represent a failure of the multi-layered security safeguards expected of regulated banking entities. These incidents typically occur when threat actors exploit gaps in perimeter defense, credential management, or legacy software systems, gaining covert access to sensitive internal networks where customer files reside.
The exposure resulting from a breach at a financial institution like Great Plains Bank Corporation involves deeply sensitive personal and financial identifiers that carry severe risks for affected consumers. When records containing names, Social Security numbers, banking account numbers, routing details, dates of birth, and credit profiles are compromised, victims face an immediate and prolonged threat of identity theft and financial fraud. Unlike transient data, core identifiers such as Social Security numbers cannot be changed, meaning victims are left vulnerable to unauthorized credit openings, fraudulent loan applications, tax fraud, and direct account takeover attempts that can drain liquid assets and devastate personal credit scores for years.
As a financial institution, Great Plains Bank Corporation is bound by rigorous statutory and regulatory frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and applicable state consumer protection statutes. The GLBA mandates that financial institutions implement comprehensive administrative, technical, and physical safeguards to protect customer nonpublic personal information against foreseeable threats and unauthorized access. The occurrence of a data breach of this magnitude strongly indicates a breakdown in these mandated security protocols, raising serious legal questions regarding whether the institution met its duty of care under federal and state law to maintain adequate data security.
Receiving a data breach notification letter from Great Plains Bank Corporation is an official admission that your private financial information was compromised due to corporate security failures, and it provides you with the legal standing necessary to participate in a class action lawsuit. You do not need to wait until you experience actual financial theft or fraudulent charges to seek legal recourse; the increased, imminent risk of identity theft is itself a legally recognized injury. Our firm investigates and litigates these data breach cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from Great Plains Bank Corporation
You were a customer, patient, employee, or client of Great Plains Bank Corporation
Your personal information was stored in Great Plains Bank Corporation's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Your Great Plains Bank Corporation notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Check your Great Plains Bank Corporation letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Claims windows close. Our team reviews Great Plains Bank Corporation breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
An unauthorized party accessed Great Plains Bank Corporation systems that stored personal information.
Reported to Attorney General
February 19, 2025
Great Plains Bank Corporation's disclosure was logged with the Maryland Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Compensation in a case like Great Plains Bank Corporation's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
States like Maryland may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Credit-monitoring subscriptions and protection plans you bought because of the breach are recoverable expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Maryland's Personal Information Protection Act (PIPA) requires companies to implement reasonable security measures. Violations can support statutory damages claims even without proof of financial harm.
The companies below also filed breach notices with the Maryland Attorney General. Letter recipients for any of them can pursue a review.
Lyon Management Group, Inc.
Maryland · Jan 2025
Cabrillo College
Maryland · Feb 2025
Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
Maryland · Feb 2025
Ott Cone & Redpath, P.A.
Maryland · Jan 2025
ChurchShield
Maryland · Jan 2025
lannuzzi Manetta & Company P.C.; lannuzzi & Darling
Maryland · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris